CmtViewer Basic HTTP Authentication Unauthorized Access

The vulnerability of the “Basic HTTP Authentication” method used by the CmtViewer application for controlling programmable panels is related to the lack of protection for the transmitted data. Exploiting this vulnerability could allow a remote attacker to gain access to the system...

CmtViewer Authentication Bypass

The vulnerability of the CmtViewer application for controlling programmable panels is related to the lack of restrictions on the number of authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the device...

CmtViewer Session Management Unauthorized Access

The vulnerability of the CmtViewer application for controlling programmable panels is related to session management errors. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access by intercepting the session...

CmtViewer Encryption Weakness Password Disclosure

The vulnerability of the CmtViewer application for controlling programmable panels is related to the use of a less secure encryption algorithm. Exploiting this vulnerability could allow an attacker to obtain the password through brute-force hashing...

CmtViewer Authentication Bypass

The vulnerability of the CmtViewer application for controlling programmable panels is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to compromise user credentials remotely...

PT-2020-5201

Name of the Vulnerable Software and Affected Versions CmtViewer affected versions not specified Description The issue is related to session management errors in the CmtViewer application for managing programmable panels. Exploitation of this issue may allow a remote attacker to gain unauthorized...

PT-2020-5202

Name of the Vulnerable Software and Affected Versions CmtViewer affected versions not specified Description The issue is related to the storage of protected information in an unencrypted form. This could allow a remote attacker to gain access to the protected information. Recommendations At the...

PT-2020-5199

Name of the Vulnerable Software and Affected Versions CmtViewer affected versions not specified Description The issue is related to a lack of authentication attempt restrictions in the CmtViewer application for managing programmable panels. This could allow a remote attacker to gain full access t...

PT-2020-5195

Name of the Vulnerable Software and Affected Versions CmtViewer affected versions not specified Description The issue is related to the use of an insufficiently secure encryption algorithm in the CmtViewer application for managing programmable panels. This could allow a remote attacker to interce...

PT-2020-5203

Name of the Vulnerable Software and Affected Versions CmtViewer affected versions not specified Description The issue is related to the use of an insufficiently secure encryption algorithm in the CmtViewer application for managing programmable panels. Exploitation of this issue may allow an...

PT-2020-5200

Name of the Vulnerable Software and Affected Versions CmtViewer affected versions not specified Description The issue is related to the lack of protection for transmitted data in the CmtViewer application's basic HTTP authorization method. This could allow a remote attacker to gain access to the...

PT-2020-5194

Name of the Vulnerable Software and Affected Versions CmtViewer affected versions not specified Description The issue is related to insufficient restriction of authentication attempts in the CmtViewer application for managing programmable panels. Exploitation of this issue could allow a remote...